-
usv 1.1.0
Stablereleased this
2026-10-24 23:07:17 +00:00 | 3 commits to main since this releaseA maintenance release that also starts the Cloudron package again under a
new identity.Security
- TLS dependencies updated past six advisories. rustls 0.23.43 to
0.23.46 (RUSTSEC-2026-0285, -0346, -0348, -0349), rustls-webpki 0.103.13
to 0.103.16 (RUSTSEC-2026-0382) and tokio 1.53.1 to 1.54.1
(RUSTSEC-2026-0386). Found bycargo denywhile preparing this release;
1.0.x carries them, which is why 1.0.x is no longer supported.
Changed
- The Cloudron package has a new identity:
io.github.orcvole.unseenservant.
The first listing used an id nobody chose on purpose (ADR 0013). It is
withdrawn, and installs of v1.0.x on the old id are not migrated:
Cloudron refuses to update an install across ids, so reinstall from the
new listing and copy/app/dataacross to keep content and
certificates. The versions feed keeps its URL and starts again empty. - The packager named in the manifest is OrcVole; the author is unchanged.
- The source repository on our Forgejo moved to
https://forgejo.unseenservant.dev/root/unseen-servant; every link in
the docs, the capsule and the deb/rpm/AUR/Nix packaging now points there. - Built with Rust 1.99.1 (was 1.93.1); the Cloudron image's runtime is
Alpine 3.24 (was 3.22).
Verify:
sha256sum -c SHA256SUMS, thenrsign verify -p unseen-servant.pub -x <file>.minisig <file>with the key inassets/unseen-servant.pub.The binary in every artefact is extracted from the gated Cloudron image
ghcr.io/orcvole/unseen-servant@sha256:49ff4e9257785625cc37a1930b4ae0af0c254bbb4737c357f9a9d53b2640d5c1.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- TLS dependencies updated past six advisories. rustls 0.23.43 to